Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/KFHxraeVCdOYiKPd_pYes0TA_YM.roa
File: KFHxraeVCdOYiKPd_pYes0TA_YM.roa (raw, json)
Hash identifier: Myt2r5a33oHUaBLLTfMz28Ecn5dH+wLKlljjpiqnES0=
Subject key identifier: 28:51:F1:AD:A7:95:09:D3:98:88:A3:DD:FE:96:1E:B3:44:C0:FD:83
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0822866167CFF42ECF2DF5D20D0CABA16
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/KFHxraeVCdOYiKPd_pYes0TA_YM.roa
Signing time: Tue 08 Sep 2026 17:54:40 +0000
ROA not before: Tue 08 Sep 2026 17:54:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 85.8.144.0/23 maxlen: 24
85.8.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:28:66:16:7c:ff:42:ec:f2:df:5d:20:d0:ca:ba:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 8 17:54:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2851f1ada79509d39888a3ddfe961eb344c0fd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:7a:2b:ef:a1:d9:d0:aa:ff:7f:dd:ce:17:
0a:f2:3c:ad:ae:bb:82:e7:2c:db:3a:55:2d:a1:f0:
b5:4d:e2:f5:4b:c7:20:3f:14:fe:98:1a:30:55:bf:
99:52:ab:ac:bb:51:52:a2:d3:3c:d1:45:bc:ad:cb:
ce:5d:c8:34:bd:9a:8f:99:9d:21:af:d6:88:89:12:
45:e3:ca:18:91:93:43:36:f4:64:a9:1c:58:2f:44:
ed:5a:6c:38:a1:aa:06:60:15:d5:3f:f7:fd:c5:91:
c9:98:a0:f7:41:bd:6b:96:ac:63:ba:17:b1:24:95:
0e:9f:da:8c:8a:a6:35:50:99:91:14:0d:db:f8:39:
0b:c4:ef:56:1b:62:bb:11:6f:0c:ab:71:92:27:db:
eb:a1:c7:a2:c4:69:2d:e1:de:9a:00:aa:41:8f:0f:
38:63:71:b1:c8:06:c7:d4:a6:de:6b:5f:51:0a:26:
01:0a:0a:31:57:08:6c:ce:65:9d:57:54:ad:4c:e3:
63:e4:8f:b8:7b:fa:6c:bb:c7:6b:f3:95:d0:9f:82:
1d:8a:23:32:25:f1:fd:43:8c:c5:5f:87:59:08:45:
83:4d:16:1a:42:e5:77:ee:0a:f0:fd:54:7e:1c:14:
aa:f1:04:c7:f6:68:7f:96:3a:9e:9b:17:e5:dd:59:
4b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:51:F1:AD:A7:95:09:D3:98:88:A3:DD:FE:96:1E:B3:44:C0:FD:83
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/KFHxraeVCdOYiKPd_pYes0TA_YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.144.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:0d:d2:b3:df:d7:f6:a4:a5:12:11:77:b1:7e:4b:cc:40:cd:
0d:01:e6:36:2a:a9:ed:aa:11:05:6d:2c:f8:aa:66:4e:b6:0f:
ea:91:ba:c9:c5:fc:df:54:44:ae:74:34:e1:a8:d0:b8:44:4e:
d0:b2:3c:5e:bf:54:ee:f5:d6:43:f2:08:dd:6c:49:b1:2d:26:
81:81:6f:0b:d8:cd:1e:32:be:1b:cb:07:a0:d3:5a:97:2f:78:
f3:63:0e:1a:48:c7:da:5b:2c:e4:86:7c:b5:b2:78:35:2b:62:
89:bc:9f:fc:12:04:e5:5f:bc:20:6e:0c:3c:8c:c3:be:bd:ca:
af:49:20:13:24:b7:73:22:cd:79:bd:7f:97:24:44:bf:38:2d:
2c:c4:6f:0e:98:a8:34:e6:3c:26:51:30:89:c6:d2:1e:cd:16:
51:08:16:9d:be:c1:d3:33:2c:5e:49:37:ee:1c:8d:7a:6e:9e:
b8:84:5c:d4:3b:25:86:c1:21:f3:d3:fc:5d:3a:37:f8:48:50:
e9:70:16:f6:f9:85:0d:26:e0:b4:ff:40:7b:4c:9c:6e:2a:ba:
d3:a7:5b:a1:b4:01:1b:9c:cd:df:3f:8d:9b:90:a7:8f:a5:9a:
40:ad:c0:07:f4:33:b8:8e:8e:4d:b9:de:d3:ad:7c:5a:fa:f9:
db:6d:02:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:58:26 2026 by rpki-client